Data Permissions

This page describes two ways to work with data-level permissions in Casbin: using implicit role/permission queries and using batch enforcement.

1. Implicit roles and permissions

When users get roles or permissions through the RBAC hierarchy (not only by direct policy rules), those are implicit. Use GetImplicitRolesForUser() and GetImplicitPermissionsForUser() to include them; GetRolesForUser() and GetPermissionsForUser() return only direct assignments. See GitHub #137.

2. BatchEnforce()

BatchEnforce() runs many access checks in one call and returns a slice of booleans. Use it to filter or validate data sets efficiently.

Example:

boolArray, err := e.BatchEnforce(requests)

const boolArray = await e.batchEnforce(requests);

List<Boolean> boolArray = e.batchEnforce(requests);